CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We've already had our first sign-ups!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 6/9, 7/14, 8/25, 10/6, 11/3, 12/8.
3. We have new forums in Portuguese and German (see below).
4. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
5. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Licensing
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-02-05
lammbo lammbo is offline
Senior Member
 
Join Date: 2006-02-09
Location: Charleston, SC
Posts: 225
lammbo has an average reputation (10+)
Default SecureClient License question

Know any other commands/methods to determine your license usage for SecureClient besides 'dtps lic'?

I'm trying to true up, but currently have an eval installed so this is what I get:

[expert@gateway]# dtps lic
SecureClient Policy Server license summary
------------------------------------------
Unlimited license for both windows and mac

Unfortunately, I need the eval for a temp during a site move and can't uninstall it long enough to get a good count. I'd like to go ahead and add a 250 pack of licenses, but if the count isn't that far off, my boss may only fund for 100. I'd rather have the 250 and be worry free for at least a little while.
__________________
There's no place like 127.0.0.1
Reply With Quote
  #2 (permalink)  
Old 2008-02-05
melipla melipla is offline
Senior Member
 
Join Date: 2006-01-25
Posts: 667
melipla has an average reputation (10+)
Default Re: SecureClient License question

You can try to load up SmartView Monitor, under Gateway Status highlight the gateway in question. Depending on the type of gateway you should have two or three different numbers you can use:

VPN -> Remote user Tunnels
SecureClient Policy Server -> Connected Users

If for some reason you can't obtain these numbers from SmartView monitor you should at least be able to do a "vpn tu" from the gateway's cli and option 1 should give you the total number of tunnels.

To convert these numbers to a comparable dtps lic here are my ratios:

1 VPN -> Remote user Tunnels = 2.65 dtps lic
1 SecureClient Policy Server = 3.42 dtps lic
1 vpn tu -> "Peer x.x.x.x" line = 2.06 dtps lic

Definitely not an exact science as some of these options will have extraneous tunnels from non-users in their numbers but it should give you a rough estimate.
__________________
Its all in the documentation.
Reply With Quote
  #3 (permalink)  
Old 2008-02-14
lammbo lammbo is offline
Senior Member
 
Join Date: 2006-02-09
Location: Charleston, SC
Posts: 225
lammbo has an average reputation (10+)
Default Re: SecureClient License question

I got a count now and I was way off the mark. I have recently received quotes for 100 and 250 users from my VAR/CP when I discovered that I really just need to buy another 1000 and get it over with for a while...

But now, I can't find the list price for SecureClient on the CP website!?! WTF?!?! Why is it always a battle with the ever *%$*&^# changing licensing model and this company. As the end user in an enterprise environment that was originally started when CP was still v4.1, it's bad enough already just trying to keep up; half of my SKU codes are so old many SE's don't even know what features are available for my stuff without looking it up. I can't imagine what you vendors go through.

Also, while I'm on this rant, let me also say that we get a raw deal on upgrades. I pay mucho dinero for software maintenance and what does that get me - the latest release... OOOHHHHH, look, I can go from R60 to R65 for "free" and that's about it. What about my 2 Unlimited SCS licenses (plus HA) that were top of the line when we purchased them... Now there are features available that I'm told 'you have to upgrade your licenses' and then they offer me a crappy trade-in deal where I can't even get 100% value for the trade-in just so I can have new stuff. Why do I pay so much money for software maintenence on a top of the line license when it will be virtually neutered within 2 years because of all the new features I won't have?!?


OK, sorry for the rant but I had to get it out of my system. If anyone is still reading and you can tell me what they've done with SecureClient on the price list, I would appreciate it.
__________________
There's no place like 127.0.0.1
Reply With Quote
  #4 (permalink)  
Old 2008-02-14
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,501
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: SecureClient License question

Quote:
Originally Posted by lammbo View Post
I got a count now and I was way off the mark. I have recently received quotes for 100 and 250 users from my VAR/CP when I discovered that I really just need to buy another 1000 and get it over with for a while...

But now, I can't find the list price for SecureClient on the CP website!?! WTF?!?!
You are looking for CPVP-VSI-1000 US$40k list

It was removed from the price list by mistake when the new CPES SKUs went on.
Reply With Quote
  #5 (permalink)  
Old 2008-02-19
lammbo lammbo is offline
Senior Member
 
Join Date: 2006-02-09
Location: Charleston, SC
Posts: 225
lammbo has an average reputation (10+)
Default Re: SecureClient License question

Now the SKU is apparently CPEP-SA-1-xxxxxxx as seen here.

The new list price for 1000 users is now $50k with no added benefit for the price increase (unless you have licensed anti-malware and/or Interspect and need NAC built in to the client).

Needless to say, I would like to have CPVP-VSC-xxxx back...
__________________
There's no place like 127.0.0.1
Reply With Quote
  #6 (permalink)  
Old 2008-02-27
melipla melipla is offline
Senior Member
 
Join Date: 2006-01-25
Posts: 667
melipla has an average reputation (10+)
Default Re: SecureClient License question

Quote:
Originally Posted by lammbo View Post
The new list price for 1000 users is now $50k with no added benefit for the price increase (unless you have licensed anti-malware and/or Interspect and need NAC built in to the client).
Then why would the SecureClient Mobile 1000 user still be $40k? I think the "regular" SecureClient license is still missing from the list.
__________________
Its all in the documentation.
Reply With Quote
  #7 (permalink)  
Old 2008-02-29
lammbo lammbo is offline
Senior Member
 
Join Date: 2006-02-09
Location: Charleston, SC
Posts: 225
lammbo has an average reputation (10+)
Default Re: SecureClient License question

Quote:
Originally Posted by melipla View Post
Then why would the SecureClient Mobile 1000 user still be $40k? I think the "regular" SecureClient license is still missing from the list.
That's just it though, there is no "regular" SecureClient any longer. It was removed from the price list and replaced by the "EndpointSecurity" client. SecureClient Mobile is apparently sticking around for a while but I expect they will raise that price very soon also.
__________________
There's no place like 127.0.0.1
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 16:37.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0